Automated multilevel defence model to investigate packets for web interface

Web applications placed on server are subject to various forms of attacks. When a server is hacked, the client gets exposed to malicious servers. These malicious servers completely control the exposed and compromised client web servers through remote access of the SQL database connected to them. The aim of this paper is to develop and deploy an automated multilevel defence Intrusion Response Model which would filter the packets in the first stage, look for the malicious data hidden in the second stage, investigate packets for securing web server using client honeypot in the third stage and analyse the data stored in the repository of the client honeypot in the fourth stage. Hence, the paper offers simulated web based applications in order to detect, monitor and analyse any malicious activity. The different client honeypot are efficient up to 60%. As can be seen, by using the right mix of effective network management and fast analysis of packets, we can greatly reduce the level of false alarms up to 28%. This practice would make the system most effective.